Threshold Multi-Party Computation for Secure Transaction Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing electronic transaction authentication processes are vulnerable to fraudulent activities due to reliance on single points of attack, such as user devices or service provider servers, which can be hacked, leading to security breaches and fraudulent transactions.
Innovation Solution
A secured multi-party computation framework is implemented, where multiple computer nodes, including user devices and third-party servers, collaborate to authenticate transactions, distributing secrets and shares among them to generate digital signatures, ensuring that no single node's failure can compromise the authentication process.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple computer nodes are used to distribute secrets and shares for authentication, then security and resilience are improved, but device complexity and computational overhead increase
Solution Approach 1:
The patent divides the authentication secret into multiple shares using secret sharing schemes, distributing them across multiple computer nodes. Each node holds a portion of the secret, and no single node can compromise the entire authentication mechanism. This segmentation approach directly resolves the contradiction by improving security through distribution while managing complexity through modular architecture.
Solution Approach 2:
The patent introduces threshold cryptography as an intermediary mechanism that enables collaborative authentication without requiring direct communication between all nodes. The threshold scheme acts as a mediator that coordinates the contribution of multiple nodes to generate digital signatures, reducing the complexity of inter-node coordination while maintaining security.
2Reliability
If threshold multi-party computation is implemented with must-have members, then control and security are improved, but computational overhead and processing time increase
Solution Approach 1:
The patent performs preliminary setup of secret sharing and threshold key generation during system initialization, before actual transactions occur. This pre-computation of cryptographic parameters and distribution of shares reduces the computational burden during live authentication, thereby decreasing authentication time while maintaining security.
Solution Approach 2:
The patent implements dynamic threshold adjustment and adaptive node selection based on transaction requirements. The system can flexibly adjust the number of required participating nodes and identify must-have members for specific transactions, optimizing the balance between security requirements and processing efficiency for different use cases.
Data Source
AI summary
Methods and systems are presented for providing a secured framework for facilitating electronic transactions using a multi-party computation approach. Under the multi-party computation approach, the task of authenticating a transaction conducted through a user account is distributed among multiple computer nodes. One or more secrets and shares of a secret are distributed among the multiple computer nodes. An authentication process is implemented such that at least a portion of the multiple computer nodes, including one or more required nodes, exceeding a predetermined number of nodes are needed to perform a set of computations using the corresponding secret(s) and/or shares of the secret in order to generate a digital signature for the user account. By verifying the digital signature using a public key of the user account, it can be determined that the participation requirement has been satisfied.